Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/D2DEEBB23F6111EF86F2D8A2762E951A.roa
File: D2DEEBB23F6111EF86F2D8A2762E951A.roa (raw, json)
Hash identifier: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=
Subject key identifier: D0:2C:06:15:47:A5:E8:26:C2:A5:E4:F4:1F:98:46:A2:B5:BE:6F:6F
Certificate issuer: /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial: 04
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/D2DEEBB23F6111EF86F2D8A2762E951A.roa
Signing time: Thu 11 Jul 2024 08:44:46 +0000
ROA not before: Thu 11 Jul 2024 08:44:42 +0000
ROA not after: Mon 31 Jul 2034 08:44:42 +0000
asID: 198949
IP address blocks: 41.242.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F4A1AF
Validity
Not Before: Jul 11 08:44:42 2024 GMT
Not After : Jul 31 08:44:42 2034 GMT
Subject: CN=668f9b7d-b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:d9:49:57:fa:eb:b9:03:41:4d:63:3f:5a:
17:84:d2:06:56:e2:28:d7:58:2e:d9:d1:f1:f5:40:
01:32:ba:81:c7:17:0b:d1:f4:ce:34:4b:94:c8:5a:
8f:85:e8:f6:5a:aa:74:6b:95:23:06:e0:69:70:18:
9d:0a:68:4a:bc:2c:36:5d:58:cf:3a:f6:c9:28:7b:
b6:74:d8:2c:b2:44:31:c1:17:94:c3:44:0b:13:88:
9d:15:8d:17:a4:72:34:bf:c0:e5:d9:41:9d:92:d2:
9d:38:38:e8:66:97:cf:4d:e5:0d:71:f9:8b:ce:b6:
b6:dc:aa:65:a4:6f:74:d7:84:68:0c:ce:fb:a2:32:
e1:d3:99:e9:a6:70:c4:bb:18:0d:75:36:b6:37:ab:
91:42:89:53:94:54:44:45:2b:ef:b3:96:31:ae:62:
6b:06:83:24:8c:df:43:d7:d9:75:e3:6f:92:7a:d0:
3b:c1:1a:98:39:1d:6e:af:8d:eb:67:26:4a:e4:70:
30:ea:6e:95:84:36:95:de:0d:8e:57:60:3e:66:08:
55:74:b5:a3:cc:a6:5a:64:99:ea:79:e9:aa:7f:49:
ea:6d:d9:e9:49:30:5a:ac:12:8a:1a:7f:59:6a:42:
24:19:54:8b:ae:ff:29:9a:53:b4:3b:0e:c0:cc:d9:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:06:15:47:A5:E8:26:C2:A5:E4:F4:1F:98:46:A2:B5:BE:6F:6F
X509v3 Authority Key Identifier:
keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/D2DEEBB23F6111EF86F2D8A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.242.124.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ee:6e:95:51:84:6e:26:41:4b:a8:ba:84:ab:db:d4:68:21:
61:87:60:57:9a:1b:a2:f9:53:76:f8:98:56:67:e6:9a:25:0c:
1d:4d:89:5b:0b:48:4d:87:a2:0e:84:e7:86:c5:99:1c:48:3c:
98:5b:9b:50:4b:3b:9b:ae:50:d3:ea:a6:88:52:7a:8f:3e:11:
d4:fd:ae:58:ad:03:a1:ec:90:df:f0:85:c5:e7:87:84:87:e1:
dc:0c:66:6f:f8:f1:bf:77:79:b1:0c:31:b2:68:b3:78:cc:fe:
e0:f3:06:9a:02:c8:45:f1:f4:d0:d2:07:27:12:73:09:9b:4a:
ed:59:be:ee:b5:c3:c2:ee:b9:81:78:3c:72:47:64:be:5b:33:
c5:b6:0a:7d:24:65:90:e0:46:69:b0:75:c0:19:33:1f:2f:7e:
a2:50:d7:c8:c2:0d:d7:f7:cc:6d:67:6c:1c:00:bd:c2:37:83:
d1:ab:1d:03:71:0a:f0:a9:43:46:08:6a:fe:e8:a7:c8:47:d7:
ea:bb:bc:77:88:c4:82:3d:3c:4e:26:d6:02:9d:cd:18:e7:cf:
2a:7e:27:75:46:04:c2:00:9f:b5:92:f9:d0:89:a5:df:1e:63:
d1:bf:10:17:55:1b:a2:28:36:e1:99:f8:95:0c:e5:c4:c3:8d:
72:5f:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:25 2025 by rpki-client